Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/j_J2KehP6AE5a7XO5_2wWVJhfGs.roa
File: j_J2KehP6AE5a7XO5_2wWVJhfGs.roa (raw, json)
Hash identifier: whoZLi1mKOpFPJajKzMLqw58G6oC1mlogQdA1vW+sE0=
Subject key identifier: 8F:F2:76:29:E8:4F:E8:01:39:6B:B5:CE:E7:FD:B0:59:52:61:7C:6B
Certificate issuer: /CN=c2c12b527a5d1f8b8bcf230eb611f52f11d52bbf
Certificate serial: 06D5856F
Authority key identifier: C2:C1:2B:52:7A:5D:1F:8B:8B:CF:23:0E:B6:11:F5:2F:11:D5:2B:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wsErUnpdH4uLzyMOthH1LxHVK78.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/j_J2KehP6AE5a7XO5_2wWVJhfGs.roa
Signing time: Sat 01 Jan 2022 14:07:45 +0000
ROA not before: Sat 01 Jan 2022 14:07:45 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 47890
IP address blocks: 193.32.160.0/24 maxlen: 24
193.32.163.0/24 maxlen: 24
185.232.64.0/24 maxlen: 24
193.46.254.0/24 maxlen: 24
185.232.66.0/24 maxlen: 24
193.46.255.0/24 maxlen: 24
193.29.12.0/24 maxlen: 24
193.47.69.0/24 maxlen: 24
2a0c:9f00::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 114656623 (0x6d5856f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2c12b527a5d1f8b8bcf230eb611f52f11d52bbf
Validity
Not Before: Jan 1 14:07:45 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8ff27629e84fe801396bb5cee7fdb05952617c6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:f4:6c:48:e2:ef:60:f1:a0:f5:41:cc:9e:3b:
c5:f8:89:65:db:8c:f6:59:b5:d5:69:f0:26:1c:ac:
07:1e:19:91:a8:f4:51:ad:92:e3:5b:33:d5:1d:7f:
de:b5:63:43:da:6c:9e:34:80:51:b1:b4:12:43:f4:
72:47:53:5c:77:78:38:f3:37:91:dd:02:a1:9c:b3:
2f:ca:a0:84:6a:8a:4a:55:9a:3c:07:8a:73:05:17:
36:3a:8a:e0:73:70:08:91:3f:71:84:dd:c6:7e:67:
f4:22:7e:17:20:b2:fd:3e:d9:b9:89:94:97:96:18:
3f:c1:d3:6a:64:67:34:e8:4e:36:95:09:77:e5:09:
5b:84:eb:e9:1f:62:e2:a2:01:8d:aa:f8:31:b1:62:
1c:4b:83:00:44:9a:99:cb:79:7a:ce:32:ff:57:c6:
ec:7c:56:9d:3c:d6:21:b0:62:98:b0:28:55:31:af:
03:4f:3e:7c:c8:aa:8f:be:63:e4:b3:13:f0:29:0f:
39:e8:e0:ac:a8:6b:c7:ed:55:79:b6:d9:b9:44:7a:
1b:8b:c6:22:32:d8:cf:f9:b7:4f:6d:5e:a2:0e:cf:
40:7f:9a:44:88:c8:9f:4d:17:31:ba:12:45:93:de:
80:79:0e:53:3d:c6:70:90:6f:f1:38:1a:05:2f:e8:
a2:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:F2:76:29:E8:4F:E8:01:39:6B:B5:CE:E7:FD:B0:59:52:61:7C:6B
X509v3 Authority Key Identifier:
keyid:C2:C1:2B:52:7A:5D:1F:8B:8B:CF:23:0E:B6:11:F5:2F:11:D5:2B:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wsErUnpdH4uLzyMOthH1LxHVK78.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/j_J2KehP6AE5a7XO5_2wWVJhfGs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/wsErUnpdH4uLzyMOthH1LxHVK78.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.232.64.0/24
185.232.66.0/24
193.29.12.0/24
193.32.160.0/24
193.32.163.0/24
193.46.254.0/23
193.47.69.0/24
IPv6:
2a0c:9f00::/48
Signature Algorithm: sha256WithRSAEncryption
01:82:75:eb:a8:8a:a1:07:a0:bb:79:97:b5:23:74:72:53:5b:
f3:50:d1:86:d8:2a:2d:64:be:0f:2c:28:46:32:a3:cd:09:00:
83:66:27:36:5b:79:87:4a:9c:99:15:6e:96:fa:98:e6:01:90:
05:cf:aa:d7:85:45:75:f6:dc:8c:55:7f:dd:8a:2d:34:d8:14:
a2:6f:e3:c8:78:95:6e:9a:3d:82:a7:d3:0c:c1:e2:71:b6:97:
42:9c:f3:e3:0e:4c:9d:e5:4d:bb:ad:35:20:17:79:a4:8f:9b:
07:49:8c:31:76:ae:e1:95:0a:94:56:47:5b:6b:62:6a:0d:f9:
d3:c2:c8:8e:d1:75:db:59:37:ef:0e:c7:50:f9:e1:bb:14:f2:
e1:f3:cd:a3:6b:dd:65:a5:9e:2f:78:d3:d8:26:e4:7a:17:d2:
6d:61:52:05:3d:61:97:d2:b0:d2:50:bd:a5:95:d3:c9:42:f0:
e7:2e:f9:70:6b:20:c6:9c:3b:47:b6:ab:9e:b6:a7:c6:3f:ec:
25:f1:05:56:8b:95:b2:6c:17:2a:6a:e8:5f:5c:a1:a8:a6:e6:
eb:d3:63:38:25:2a:a1:5a:58:6a:f4:5b:ff:bc:50:0a:ba:2a:
4b:ec:0b:75:74:78:ba:13:3f:61:aa:c5:3f:0f:28:44:b0:73:
84:41:ef:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:37:13 2025 by rpki-client